CVE-2022-33161

5.3MEDIUM

IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit th

发布于: 10/14/2023更新于: 11/21/2024
在NVD查看在MITRE查看

描述

IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 228569.

AI分析AI驱动

受影响产品

ibmsecurity_directory_integrator
7.2.0
ibmsecurity_directory_server
6.4.0.0
ibmsecurity_directory_suite
8.0.1
ibmsecurity_verify_directory
10.0.0

参考资料